ISO/IEC 27017

cloudgovernance & risk

Stands for: ISO/IEC 27017 (cloud security controls)

The cloud-security extension of ISO 27001 - controls specific to being, or using, a cloud service provider.

ISO/IEC 27017:2015 supplements ISO 27002/27001 with cloud-specific guidance: shared responsibility, virtual-machine hardening, administrator operations, tenant isolation. It is not a standalone certification so much as a cloud overlay, which is why it almost always appears bundled with 27001 and 27018 on a provider's compliance page.

Also known as: iso 27017, iso/iec 27017, iso27017

← All glossary entries